Cross-site Scripting (XSS)

Overview org.webjars.npm:dompurify is a DOM-only XSS sanitizer for HTML, MathML and SVG. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the sanitizeAttributes function when PARSERMEDIATYPE is set to application/xhtml+xml. In XHTML mode, transformCaseFunc is the...

Cross-site Scripting (XSS)

Overview dompurify is a DOM-only XSS sanitizer for HTML, MathML and SVG. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the sanitizeAttributes function when PARSERMEDIATYPE is set to application/xhtml+xml. In XHTML mode, transformCaseFunc is the identity function...